Warda-DNS Warda: from ward — to protect, guardian
v0.9.10

Roadmap

Where Warda is going

What is done, what we added beyond the plan, what we are working on, and what comes next, in the order it is planned. None is promised for a given version.

Suggest an improvementReport a bug

32 done27 added3 in progress2 plannedUpdated 5 November 2026

Done

32

In the beta today.

Built-in list and categories

Advertising, trackers, malware and phishing blocked from the installation; protections by category and named services.

Blocking

Suggestions with context

Three levels of learning; each suggestion shows the device, the time and the request just before; the "Watched names" tab shows what is watched and why.

Learning

One card per person

Profiles adapted to age, safe search, a pause for one device or the whole house.

Family

Encrypted DNS by default

DoH or DoT to the Internet; DoH, DoT and DoQ for your devices with a free certificate, each protocol checked every 15 minutes and shown on the dashboard.

Encrypted DNS

DHCP, local records, IPv6

Optional DHCP server, local names and IPv6 announced so no device goes around Warda.

Network

Groups and unblock requests

Groups of employees and servers, global activity log, requests approved by the administrator.

Small businesses

Website in 12 languages

English, French, Spanish, German, Dutch, Italian, Portuguese, Polish, Romanian, Czech, Hungarian and Greek.

Website

Validation of DNSSEC by Warda itself

Optional: Warda checks the signatures itself from the root of the DNS; the answers that do not verify are refused.

Encrypted DNS

IPv6 DHCP

Built-in DHCPv6 server, with reserved addresses and local names.

Network

Finer rules

Rules per device; rate limiting per device; a choice of the answer to a blocked name (the “Blocked by Warda” page by default, 0.0.0.0, NXDOMAIN, REFUSED).

Blocking

SIEM export and data leaks through DNS

Syslog, CEF or JSON to Wazuh, Graylog, Elastic, Splunk or Sentinel; and for everyone, free: DNS tunnels stopped.

Small businesses

Look-alike names and their report

Homographs, typing mistakes and brands in another name blocked or reported; one line per name in the report of the misleading names.

Security

Threats and security report

Rebinding, spyware, remote control tools and clockwork beacons; quarantine in one click; a security report over the last 7 or 30 days (subscription).

Security

Map and check of the network

The whole plan at a glance, placed by the switches (SNMP); the IPv6 DNS of the box and the silent devices found, those with their own DNS ignored on request.

Network

Roles and groups

Administrator or Member for everyone; with Warda Business, groups of accounts with roles from a catalogue; the emergency account protected; every change logged.

Small businesses

Users of the directory (beta)

Warda Business: the people of Active Directory or OpenLDAP imported every hour, the groups of the directory matched with groups of devices.

Small businesses

Collective base (beta)

Off by default: the box asks Warda's analysis service for its opinion on the names it doubts, sending registrable domain names only; the dangerous names come back as suggestions. With the subscription.

Security

Data loss prevention at the DNS level (beta)

Warda Business: file transfers, storage, paste sites, webmail and AI assistants allowed, reported or blocked by group, person or device, with a report and the SIEM; then with the HTTPS inspection.

Small businesses

High availability and sites (beta)

Warda Business: two boxes that take over from each other on a shared address; the boxes of distant sites followed from one manager box.

Small businesses

Unblock requests with a duration (beta)

15, 30, 45 or 60 minutes or for good, with a justification; approved or refused from the dashboard, with a history.

Small businesses

Security center, AI services, device policies and company reports (beta)

Warda Business: a score out of 100 and the actions to take; the AI assistants used, allowed or blocked; rules and compliance by group of devices; a summary ready to print.

Small businesses

Directory: sign-in, Entra ID and Google Workspace (beta)

Warda Business: the people of the directory sign in to Warda with their AD or LDAP password, or with Microsoft (Entra ID) or Google (Workspace); the groups of the directory give their rights; the people of Entra ID and Google Workspace imported every hour.

Small businesses

Restricted mode for connected objects (beta)

At home and in businesses, free: a device or a group of objects learns the names it needs for a few days, then only those are allowed; any other name is blocked and reported, and allowed again in one click.

Security

Hours of Internet and time spent

Internet hours for each child, school holidays included; time spent by day, site and device; a child asks for 15, 30 or 60 more minutes, granted in one click; a summary of the week. With the subscription.

Family

A dashboard that tells what happened

The health of the box live, with bars that change colour as it fills up, and the load and network over the last hour; the activity chart marks the alerts, updates and restarts at their time.

Interface

Lists that are easy to read

Long lists by pages of 10 to 100 lines, remembered for each list; one row out of two shaded in the list of devices; a soft colour for each person and each group.

Interface

Boxes and routers of Europe recognised

45 internet boxes of the EU, the UK, Switzerland and Norway, and 21 families of home routers, mesh included: Warda says where to set it as DNS server, explains the double NAT and when to let it give the addresses.

Network

One device per machine

A machine seen twice is merged by itself; makers from the three IEEE registries; phones with a private address named from what they tell the network.

Network

Signed updates and encrypted backups

Updates signed by the publisher, looked for every 6 hours, installed at night and rolled back by themselves if a version does not start; an encrypted backup every night, copied to a USB drive.

Security

Privacy in plain words

The terms of use list everything the box sends to the Internet; the anonymous statistics show exactly what they send (a random identifier renewed each day, the version, the type of installation, the country, the plan of the box) and turn off in one click.

Security

Customer area

account.warda-dns.com: your account, your boxes linked with a code shown on the box, the plan signed for each box, and the sites and high-availability pairs of Warda Business validated. Three types of account: Free, Subscription and Business (SME); a free account can activate a subscription later. Payments come when subscriptions open; during the beta everything stays open.

Website

Protection away from home

With the subscription (beta): a phone, tablet or laptop keeps its rules on mobile data and other Wi-Fi networks, through the online service of Warda, which passes its queries to the box; a profile for iPhone, iPad and Mac, an app on Android, a setting in Windows 11 and in the browsers.

Family

Added

27

Beyond the plan or ahead of it, in Warda 0.8.0 to 0.8.5 and 0.9.10.

Help center

On the website, in 12 languages: install, router and IPv6, phones and browsers that go around Warda, the block page, updates and backups, and the questions asked most often.

Website

Analysis service: visit of suspicious pages (beta)

When Warda's analysis service doubts a domain, it now reads the page from afar, without running any of its code, and spots fake login forms, brand impersonation and phishing kits; nobody on your network opens the page.

Security

Sites managed from the head office (beta)

Warda 0.9.10, Warda Business: one policy for every site (company rules, data loss prevention, AI services, device policies), signed by the manager box and checked by each site; every site updated at once; one report of the company, counts only; an alert when a site goes silent.

Small businesses

Model of the learning on the box (beta)

Warda 0.9.10, free: a small model trained on the decisions of many administrators, downloaded signed, sharpens the suggestions and proposes suspicious names, always explained and never applied without you; nothing of your network leaves the box for it.

Learning

Web proxy in the box, without decryption (beta)

Warda 0.9.10, Warda Business: an explicit proxy announced by the network, deciding every site with the rules of the DNS; each connection logged with its volume; the AI services, file sharing and webmails seen from the name of the TLS handshake. HTTPS inspection stays planned.

Small businesses

Exposure on the Internet (beta)

Free: your public address checked from outside on the risky ports, the openings of the router (UPnP) read, Telnet and FTP looked for on the network; once a week or on request, with advice and an alert for each new finding.

Security

Known data breaches and password test (beta)

With the subscription, the e-mail addresses of the household checked every week with k-anonymity (never the address itself), once the breach service of Warda opens; free, a password tested against known leaks without leaving the browser.

Security

Hidden mining blocked for everyone (beta)

Free: mining pools and miners in web pages blocked on every device; the device that tries is reported, with quarantine one click away.

Security

Confident trackers blocked automatically (beta)

An option at the level strong: the new tracker and telemetry names Warda is surest of are blocked by themselves, a few a week at most, each undone in one click.

Learning

Mobile data at home: parents told (beta)

With the protection outside the home: a child’s phone that switches to mobile data just after being on the network is reported, and so is a device that probably uses its shared connection — a likelihood, never a certainty.

Family

A licensed list of child sexual abuse material (beta)

Warda 0.9.10: an organisation that holds a licence from an authorised body, such as the IWF, can plug in its hashed list, downloaded over HTTPS and never readable on the box. Warda itself holds no such list.

Blocking

Reputation by domain on the box (beta)

Free: the domains your household does not know well, and those that imitate a known name, are checked with Warda’s analysis service (the domain alone, never who asked); malicious, they are blocked for everyone; suspicious, for the children and teenagers; suspicious and less than 14 days old, for everyone. The very first visit to a never-seen domain may pass: the block follows within minutes.

Security

“Blocked by Warda” page, on by default (beta)

On by default from Warda 0.8.4 (the administrator can choose another answer): instead of a page that does not load, a blocked site shows that Warda blocked it and why, with a link to ask for it to be unblocked. On secure (HTTPS) sites the page shows without a browser warning once the household’s own Warda certificate is installed on the device, from a page of the box with the steps for Windows, Mac, iPhone and iPad, Android, Linux and Firefox.

Blocking

Protection lists that grow faster

Warda’s analysis service takes many addresses at once from the Warda team, checks each one with several sources (VirusTotal, urlscan.io, threat feeds) and sorts it by itself into the protection lists every box downloads. Very popular sites are never sorted by themselves: a person reviews them; a site blocked by mistake goes on a whitelist quickly.

Blocking

Decisions on the alerts and unusual days

Each alert accepted (the allow that fits it), refused (the block or the quarantine) or kept under watch (told again every 14 days while it goes on), dated, logged and undone in one click; the unusual days of each device found in the trends, with an alert. With the subscription.

Security

15-minute unblock and company logo

Warda Business: off by default, the person in front of the block page unblocks a site for 15 minutes on their device after choosing why, a few times a day, never for a threat; the logo of the company on its reports, the block page and the unblock page.

Small businesses

Summary of the week by e-mail, school zones

The summary of the week kept 52 weeks and sent every Monday through your own mail server, never through the online service of Warda; school holidays chosen by school zone (France A, B, C).

Family

Clearer reports and dashboard

Half rings on the figures, the types of queries of each device and a map of the world drawn on the box; the lists updated and the monitored categories on the activity chart; the exposure on the Internet on the dashboard, its findings expiring into a history after 7 days; the makers of the devices refreshed every day.

Interface

Rules for a person or a group (beta)

Warda 0.9.10, free: a site blocked or allowed for one person on all their devices, or for a group of devices, for good or for a while; the block page says whose rule it is.

Blocking

Other networks of the place, VLANs (beta)

Warda 0.9.10, free: the networks of the guests, cameras and objects declared in two fields, scanned and named; the networks seen asking without being declared are suggested.

Network

Devices deleted, one by one or in one go (beta)

Warda 0.9.10, free: those known only by IPv6 or not seen for a number of days counted then removed; their counts stay in the statistics.

Network

Leaks told by the record types (beta)

Warda 0.9.10, free: a burst of rare records (TXT, NULL…) carrying data to one domain is stopped for that device; the checks of the mail servers are left alone.

Security

Devices that may use another DNS (beta)

Warda 0.9.10, free: a device on the network that never asks Warda, or stopped asking it, is listed with what to check, and raises an alert once a day.

Security

High availability that runs itself (beta)

Warda 0.9.10, Warda Business: a read-only secondary, alerts when a box takes over or goes silent, reports that count both boxes, a lost primary replaced in one click, a shared IPv6 address.

Small businesses

Analyze a domain from the query log (beta)

Warda 0.9.10, free: one click asks Warda's analysis service about a domain, the domain alone; a harmful one is proposed to the Warda team for the shared lists, never added by itself; you block or allow it on your box.

Security

A query log for busy networks

Warda 0.9.10, free: the lines show at once with millions of queries, the count comes after, and the pages never read the whole journal.

Interface

Alerts of the pair and of the sites on the phone (beta)

Warda 0.9.10, Warda Business: a push notification to the administrators on a failover, a lost or replaced box, or a silent site.

Small businesses

In progress

3

What we are working on.

Open beta

Feedback from testers at home and in small businesses.

Beta

Tests and CVE scanning

Every feature announced checked by an automated test; dependencies, code and images scanned at every version and every night, with a bill of materials (SBOM).

Security

Payment and invoices in the customer area

Being tested, not open to customers yet: the subscription paid online by card or PayPal on the page of the payment provider (Warda never handles a card number), renewed each month or each year, and Warda Business too, priced site by site from the users declared; a switch from monthly to yearly payment (or back) at the end of the time already paid; a receipt by e-mail and invoices ready to print; the VAT of the customer’s country for consumers in other EU countries, through the One-Stop Shop (OSS), once Warda is registered for it. Also the billing details, the e-mail address changed, the data exported and the account deleted by the customer. Nothing is charged during the beta.

Website

Planned

2

In the order they are planned.

1

Support access from the customer area

When the support site opens: an access to it created by itself for the accounts with a subscription and the business accounts of the customer area.

Website
2

HTTPS inspection

For the paid plans, on the devices chosen and never without the knowledge of the people concerned; banks, health and personal messages never opened. It will take the data loss prevention of Warda Business beyond the DNS.

Security

Suggest an improvement

An idea, a missing feature, something that could be simpler? Every suggestion is read, and the most requested ones move up the list.

Found something that does not work? Report a bug instead